On Tue, 14 Sep 2010 11:35:28 -0400 Peter Walter <pwal...@itlsys.com> wrote: > This is my first time posting to this list, so, please be gentle. > > I have a Windows executable created by WinRAR 3.93 in their SFX format. > ClamAV engine 0.95.3 running on Linux consistently detects the signature > for DOS.Form.a in the file.
Hi Peter, the signature should be blacklisted with the next daily.cvd update. You can turn it off locally anytime with: (the dbpath may vary) $ echo "DOS.Form.a (Clam)" > /usr/local/share/clamav/ignore.ign2 BTW, we're at 0.96.2 now -- oo ..... Tomasz Kojm <tk...@clamav.net> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Sep 14 17:56:14 CEST 2010 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
